[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade pgbouncer to 1.24.1 to fix CVE-2025-2291 [High] - branch main (#13566)

Author: CBL-Mariner-Bot

SPECS/pgbouncer/pgbouncer.signatures.json

@@ -1,6 +1,6 @@
 {
- "Signatures": {
-  "pgbouncer-1.16.1.tar.gz": "087477e9e4766d032b04b7b006c0c8d64160a54141a7bfc2c6e5ae7ae11bf7fc",
-  "pgbouncer.service": "9c158af014827b4b96577caacce1d5fbf1e186ebb481c96f4f071a0f05425fe1"
- }
-}
+  "Signatures": {
+    "pgbouncer.service": "9c158af014827b4b96577caacce1d5fbf1e186ebb481c96f4f071a0f05425fe1",
+    "pgbouncer-1.24.1.tar.gz": "da72a3aba13072876d055a3e58dd4aba4a5de4ed6148e73033185245598fd3e0"
+  }
+}

SPECS/pgbouncer/pgbouncer.spec

@@ -1,6 +1,6 @@
 Summary:	Connection pooler for PostgreSQL.
 Name:		pgbouncer
-Version:	1.16.1
+Version:	1.24.1
 Release:	1%{?dist}
 License:	ISC License
 URL:		https://www.pgbouncer.org/
@@ -80,6 +80,9 @@ fi
 /usr/share/doc/pgbouncer/*
 
 %changelog
+* Tue Apr 22 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.24.1-1
+- Auto-upgrade to 1.24.1 - bump version to fix CVE-2025-2291
+
 * Sun Nov 28 2021 Muhammad Falak <mwani@microsoft.com> - 1.16.1-1
 - Bump version to fix CVE-2021-3935
 

cgmanifest.json

@@ -21064,8 +21064,8 @@
         "type": "other",
         "other": {
           "name": "pgbouncer",
-          "version": "1.16.1",
-          "downloadUrl": "https://pgbouncer.github.io/downloads/files/1.16.1/pgbouncer-1.16.1.tar.gz"
+          "version": "1.24.1",
+          "downloadUrl": "https://pgbouncer.github.io/downloads/files/1.24.1/pgbouncer-1.24.1.tar.gz"
         }
       }
     },